Port No | 12310 |
Service Name | Precursor |
RFC Doc | 0 |
Protocol | TCP |
Description | Precursor 1.0 is a trojan from 1999. There are a lot of AOL commands, which probably do not work since AOL has been updated. |
Reference Link | Precursor |
Attack | It Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: Precursor Server Features: AIM commands AOL commands Change wallpaper Disable/enable CTRL-ALT-DEL File manager Get screen shot Monitor on/off Open/close CD-Rom Run program Show picture Start screen saver Swap mouse buttons Fix: Remember the file path in the Precursor server key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and then remove the Precursor server key. Which can be done with regedit or any other registry editing program. Reboot the computer or close the trojan file listed in the registry. Delete the trojan file listed in the registry. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.